Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/3230312e3135372e3230382e302f32342d3234203d3e203238333436.roa
File: 3230312e3135372e3230382e302f32342d3234203d3e203238333436.roa (raw, json)
Hash identifier: Ec0KX3aLZ8HCpWkh2SCil8Ol3vPhfWUjgMPS0mcH7Sg=
Subject key identifier: FB:29:7D:17:15:AF:EF:11:1E:BD:58:3A:61:A0:F2:B4:B1:E1:75:67
Certificate issuer: /CN=D35AD762F990F266087F46B5C22E9EA9E288BF8E
Certificate serial: 43DBCEFC9D2118456F0A12C311815DC7539FF9EE
Authority key identifier: D3:5A:D7:62:F9:90:F2:66:08:7F:46:B5:C2:2E:9E:A9:E2:88:BF:8E
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.cer
Subject info access: rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/3230312e3135372e3230382e302f32342d3234203d3e203238333436.roa
Signing time: Wed 03 Jul 2024 12:40:11 +0000
ROA not before: Wed 03 Jul 2024 12:35:11 +0000
ROA not after: Wed 02 Jul 2025 12:40:11 +0000
asID: 28346
IP address blocks: 201.157.208.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 03 Jul 2024 12:49:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:db:ce:fc:9d:21:18:45:6f:0a:12:c3:11:81:5d:c7:53:9f:f9:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D35AD762F990F266087F46B5C22E9EA9E288BF8E
Validity
Not Before: Jul 3 12:35:11 2024 GMT
Not After : Jul 2 12:40:11 2025 GMT
Subject: CN=FB297D1715AFEF111EBD583A61A0F2B4B1E17567
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:d4:52:3a:7c:7b:90:4e:e1:5f:39:b2:18:e2:
55:34:23:9e:31:33:9d:ae:df:42:c5:52:da:ae:b5:
2e:33:de:61:c1:2f:b0:b0:76:09:6c:89:ab:ba:62:
f9:7a:47:08:87:53:ed:1e:18:63:44:2f:96:1f:68:
97:7f:71:aa:56:98:c5:48:ba:6d:8f:15:2f:7a:ea:
60:5c:42:7a:7a:26:fd:0a:0b:6b:6f:91:68:83:ce:
df:f6:e4:30:69:03:10:6b:42:10:de:42:fb:cc:16:
37:46:a8:df:6f:d8:af:29:8d:19:39:06:00:d5:dc:
71:89:93:5a:53:a1:f3:21:f0:1c:af:ca:64:73:cc:
f5:3e:21:3f:63:fc:38:54:c6:a0:7a:42:e1:3e:f9:
38:87:a1:10:31:89:03:23:93:b9:35:9f:8d:da:41:
00:53:a5:42:f8:81:1a:2a:71:f6:55:aa:8e:e5:cd:
68:32:fe:11:69:d7:1f:d8:6f:4e:5b:d0:2a:35:91:
45:24:06:4f:3b:7f:e1:80:9d:5b:7b:e4:8f:37:54:
ac:96:09:e3:de:53:0f:11:21:81:d6:5e:25:b9:f4:
21:77:7b:f0:66:1c:b5:70:fa:74:7d:29:d6:0e:a8:
ef:38:56:33:45:cd:68:61:09:6f:d3:de:4d:9c:a7:
1c:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:29:7D:17:15:AF:EF:11:1E:BD:58:3A:61:A0:F2:B4:B1:E1:75:67
X509v3 Authority Key Identifier:
keyid:D3:5A:D7:62:F9:90:F2:66:08:7F:46:B5:C2:2E:9E:A9:E2:88:BF:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D35AD762F990F266087F46B5C22E9EA9E288BF8E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/5T3NusHEsX3usPU5hhrq19XbYjSfhytrZa5gMGGpbzMG/1/3230312e3135372e3230382e302f32342d3234203d3e203238333436.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.157.208.0/24
Signature Algorithm: sha256WithRSAEncryption
09:8a:7a:12:4d:d6:b6:24:84:e8:4a:d1:97:b7:cb:70:f1:62:
8f:8a:01:44:ab:99:e1:89:43:23:25:14:fb:e6:3c:94:83:98:
94:db:a6:99:2d:60:89:99:55:7f:13:48:0a:2e:a8:ad:a7:3b:
09:b5:19:43:37:75:bb:75:bc:ef:1a:2a:d2:18:f4:1b:89:a2:
79:e3:15:41:bc:84:03:e4:8e:5e:34:09:0c:e2:86:ff:9d:4d:
77:0a:20:28:c3:2c:bf:60:d2:31:30:47:58:9e:2f:94:ab:0f:
75:6b:5c:d1:f7:97:d7:72:18:bb:8e:52:7b:fa:5f:0a:dc:1b:
5e:ed:0b:1e:5b:0a:74:9f:0c:14:b5:19:00:cf:aa:be:27:af:
e9:d7:59:06:80:2e:07:04:8c:30:2c:77:20:01:f0:52:cd:5c:
1d:48:e0:c2:44:24:e5:30:cb:03:60:cd:78:69:31:a1:24:1f:
2a:c8:3d:aa:ec:8a:70:76:df:a6:3b:45:60:3f:42:ca:21:d0:
30:48:56:61:dd:2f:71:c7:de:4c:49:ca:b8:50:49:01:dd:98:
a1:b5:ed:46:e8:59:df:38:d2:3a:dc:1a:2e:b9:7a:1a:d7:3b:
3e:21:12:41:5c:98:a1:86:94:e4:61:84:98:9a:62:52:e3:79:
91:ee:2c:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 3 15:14:02 2024 by rpki-client on console-fra.rpki-client.org